CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
The snmpd service in SCO OpenServer has a writable SNMP community string by default, allowing local attackers to modify the host's configuration.
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, leading to the exposure of sensitive data.
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
surfCONTROL SuperScout does not properly assign a category to web sites ending with a dot, which may allow users to bypass web access restrictions.
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, known as the 'Recycle Bin Creation' vulnerability.
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
VMware 1.1.2 allows local users to perform a symlink attack, which can lead to denial of service.
CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
AIX techlibss allows local users to overwrite files via a symlink attack.
The recover program in Solstice Backup allows local users to restore sensitive files.
Cisco Resource Manager (CRM) versions 1.0 and 1.1 create world-readable log files and temporary files, which may expose sensitive information such as user IDs, passwords, and SNMP community strings to local users.
Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.
netcfg 2.16-1 in Red Hat Linux 4.2 allows users to control the Ethernet interface on reboot when an option is set, enabling local users to cause a denial of service by shutting down the interface.
Cisco Resource Manager (CRM) 1.1 and earlier creates files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings.
The vulnerability in lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack triggered after invoking lpr 1000 times.
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS